Network & Infrastructure Management Flashcards
7 cards from real CTP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Network & Infrastructure Management flashcards as text
Which infrastructure as code (IaC) practice allows network configurations to be version-controlled and reproducibly deployed?
Answer: Declarative configuration management
Declarative IaC tools (e.g., Terraform, Ansible) define the desired infrastructure state in code, enabling versioning, peer review, and repeatable deployments.
What is configuration drift in infrastructure management?
Answer: Unintended divergence of a system's actual configuration from its documented baseline
Configuration drift occurs when manual changes or system updates cause a device's running configuration to deviate from the intended, documented standard.
Which disaster recovery metric defines the maximum acceptable amount of data loss measured in time?
Answer: RPO (Recovery Point Objective)
RPO defines how far back in time recovery must reach — the maximum tolerable data loss — and drives backup frequency decisions.
What distinguishes a cold site from a hot site in business continuity planning?
Answer: Cold sites have no pre-installed equipment; hot sites are fully operational with current data
A hot site mirrors the production environment with live data replication and can assume operations in minutes; a cold site provides only physical space and power, requiring full setup before use.
In network capacity planning, which approach forecasts future resource needs based on historical growth trends?
Answer: Trend-based capacity planning
Trend-based capacity planning analyzes historical utilization data to project future demand, enabling proactive infrastructure investments before bottlenecks occur.
Which network monitoring approach uses flow data (e.g., NetFlow, sFlow) to analyze traffic patterns?
Answer: Flow-based monitoring
Flow-based monitoring collects summarized traffic metadata from routers and switches, providing visibility into traffic volumes, top talkers, and usage patterns without full packet capture overhead.
What is the primary purpose of network segmentation using micro-segmentation in a data center?
Answer: To enforce granular security policies between individual workloads
Micro-segmentation applies fine-grained security policies at the individual workload or VM level, limiting lateral movement by attackers even within the same data center segment.